CVE-2022-23770 — WISA Smart Wing CMS Remote Command Execution Vulnerability

CVE-2022-23770

WISA Smart Wing CMS Remote Command Execution Vulnerability PUBLISHED

Description (CNA)

This vulnerability could allow a remote attacker to execute remote commands with improper validation of parameters of certain API constructors. Remote attackers could use this vulnerability to execute malicious commands such as directory traversal.

Affected (CNA)

Vendor / product	Versions
WISA corp. / Smart Wing CMS	affected unspecified before ver.19051

CWE

CWE-20

References

https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66963

ADP enrichment

CVE

No English description supplied.

https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66963

CISA-ADP

No English description supplied.

No references supplied.